Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/a72abf54-5ef3-3d43-8f85-a1c85c016a4e.roa
File:                     a72abf54-5ef3-3d43-8f85-a1c85c016a4e.roa (raw, json)
Hash identifier:          kYAal9/15BTKxO99HSf6DH77cnMMLDSLypyrSzthYRc=
Subject key identifier:   9E:C9:11:AB:BA:1A:DC:35:F4:2C:25:B8:6C:B7:CD:6D:10:FF:F3:C2
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584F3CE2A98E38FC9CF78BAC20E0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/a72abf54-5ef3-3d43-8f85-a1c85c016a4e.roa
Signing time:             Sun 20 Sep 2026 13:00:12 +0000
ROA not before:           Sun 20 Sep 2026 13:00:12 +0000
ROA not after:            Sat 19 Dec 2026 14:00:12 +0000
asID:                     7029
IP address blocks:        207.254.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3c:e2:a9:8e:38:fc:9c:f7:8b:ac:20:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Sep 20 13:00:12 2026 GMT
            Not After : Dec 19 14:00:12 2026 GMT
        Subject: CN=95f6bcbc-d8b6-467c-a9b1-7519cb8fe471
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:91:2d:90:d7:72:bf:44:23:2e:22:57:90:fa:
                    63:93:ec:11:42:3a:da:8a:04:9f:50:6f:52:95:44:
                    b8:55:d3:4a:c2:2c:8f:3c:ea:36:72:33:ea:57:85:
                    f3:1e:d8:e0:42:b5:a1:3a:71:63:ee:b4:1b:18:8b:
                    e4:36:ae:e5:bf:06:66:c7:45:07:a9:2e:eb:a6:4b:
                    f4:ee:ff:41:33:09:bd:3f:74:dd:f4:7c:32:e4:44:
                    ff:b8:16:55:cb:f5:d9:fe:8e:81:11:a3:4a:a9:4e:
                    e2:23:02:84:49:c8:16:4a:0f:52:f0:f8:2e:df:25:
                    1a:f6:76:cd:ea:96:98:b8:b5:e3:12:31:ce:01:d5:
                    b4:39:80:d0:2a:5a:1f:a1:14:99:04:b4:f1:7d:c9:
                    6f:1f:26:dc:9a:d5:3d:cd:c3:7f:25:74:26:d5:8b:
                    72:b9:91:5b:ec:7f:d5:e4:8a:b1:31:8b:73:dc:6c:
                    88:4f:db:1f:0e:d4:3c:54:c0:fe:8f:f5:24:c2:f4:
                    ef:92:21:28:35:9e:98:e9:85:49:3d:e2:e8:aa:fa:
                    86:55:46:47:f6:3f:ac:4d:e7:87:d9:4c:f2:e5:83:
                    40:7a:9c:55:25:f3:d2:49:ae:b8:1d:8a:18:f5:b9:
                    94:41:67:8d:f0:d1:0d:8c:e6:8c:8a:a3:db:80:c8:
                    e2:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:C9:11:AB:BA:1A:DC:35:F4:2C:25:B8:6C:B7:CD:6D:10:FF:F3:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/a72abf54-5ef3-3d43-8f85-a1c85c016a4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.254.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:0b:ff:bd:1f:88:78:bf:43:7f:bd:c9:ab:ed:23:3c:54:71:
         31:9a:b2:a4:a7:32:b3:43:e2:5f:58:8c:7b:f6:6e:1d:56:4a:
         12:07:a8:cf:38:c0:47:cb:34:04:04:29:d5:2d:27:e5:73:91:
         6f:c3:c1:5f:ad:1e:71:45:df:1f:ef:15:a3:4e:f0:09:fe:a5:
         62:d9:01:40:48:ec:b1:ed:c6:3b:c1:ea:83:52:d3:f1:18:a4:
         32:5b:d9:22:3f:ec:4d:7c:1a:0a:53:cf:20:aa:3b:9b:be:38:
         c2:66:61:b7:3d:d7:a4:be:82:98:74:f4:78:f3:f9:15:95:04:
         de:d9:09:c6:62:4b:aa:10:2c:df:b2:e9:57:b2:2b:1f:cc:f9:
         b7:1e:a2:f1:cb:68:4c:9b:9e:b3:3e:a8:6a:16:c0:fc:75:90:
         c7:b0:aa:2a:89:8f:ae:4a:5b:9c:b8:72:44:60:1b:74:00:4e:
         ea:2d:68:0c:d1:84:2b:1d:cb:20:24:b2:44:c3:aa:bc:88:04:
         19:78:7a:b1:f3:c7:57:65:b0:63:5e:8a:f8:1a:02:74:4e:fc:
         bc:37:ca:c2:50:18:c2:d9:1e:60:39:14:d7:9a:7d:30:7c:a3:
         33:d3:12:a4:7c:9d:3e:2a:9f:dc:9d:c5:e8:26:d2:c9:46:23:
         f0:d7:d9:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:21:18 2026 by rpki-client